/ Willi Ballenthin / blog

MFT Analysis Presentation

December 13, 2013

I recently gave a presentation on analyzing NTFS MFT files during an incident response. You're welcome to review the slides here.